Commit Graph

289 Commits

Author SHA1 Message Date
Mark Andrews
c44bb94bc8 2940. [func] Check that named successfully skips NSEC3 records
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
2010-08-13 07:25:22 +00:00
Tatuya JINMEI 神明達哉
302cb51bc4 2937. [bug] Worked around an apparent race condition in over
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
2010-08-11 23:42:53 +00:00
Mark Andrews
a3398dba83 9.6-ESV 2010-03-03 22:06:40 +00:00
Tatuya JINMEI 神明達哉
450c3bb498 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:34:30 +00:00
Mark Andrews
ae787010e1 2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781] 2009-12-29 22:12:35 +00:00
Automatic Updater
1beb3ce612 update copyright notice 2009-11-26 23:47:33 +00:00
Mark Andrews
432b145c6e 2790. [bug] Handle DS queries to stub zones. 2009-11-26 03:36:45 +00:00
Mark Andrews
eb5f89b06e 2786. [bug] Additional could be promoted to answer. [RT #20663] 2009-11-25 02:25:56 +00:00
Mark Andrews
e7f4d4e09d 2772. [security] When validating, track whether pending data was from
the additional section or not and only return it if
                        validates as secure. [RT #20438]
2009-11-18 00:15:38 +00:00
Evan Hunt
a9775fe88d 2706. [bug] Loading a zone with a very large NSEC3 salt could
trigger an assert. [RT #20368]
2009-10-06 21:20:18 +00:00
Automatic Updater
e4aad620d2 update copyright notice 2009-10-03 23:47:29 +00:00
Evan Hunt
02a7cfcc8a 2699. [bug] Missing lock in rbtdb.c. [RT #20037] 2009-10-03 22:39:04 +00:00
Mark Andrews
785eb615e3 2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865] 2009-07-13 07:04:36 +00:00
Tatuya JINMEI 神明達哉
0e8a52d67d 2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
long, leading to inefficient memory usage or rejecting
			newer cache entries in the worst case. [RT #19563]
2009-05-06 23:34:30 +00:00
Tatuya JINMEI 神明達哉
3e132fc2dd wording fix for cpp error message (rt #19569) 2009-04-07 02:50:11 +00:00
Mark Andrews
7808280b34 2573. [bug] Replacing a non-CNAME record with a CNAME record in a
single transaction in a signed zone failed. [RT #19397]
2009-03-05 04:57:40 +00:00
Tatuya JINMEI 神明達哉
2a238ee552 2538. [bug] cache/ADB memory could grow over max-cache-size,
especially with threads and smaller max-cache-size
			values. [RT #19240]
2009-01-28 23:24:19 +00:00
Automatic Updater
99b63ca8e5 update copyright notice 2009-01-18 23:47:41 +00:00
Mark Andrews
d7900926bf spelling 2009-01-18 23:25:18 +00:00
Mark Andrews
2628c71479 silence compiler warning. [RT #18990] 2008-11-14 14:07:48 +00:00
Mark Andrews
76bd01263f remove debugging printf 2008-10-29 05:53:12 +00:00
Mark Andrews
736e6a6709 2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
collisions.  [RT #18812]

2480.   [bug]           named could fail to emit all the required NSEC3
                        records.  [RT #18812]
2008-10-29 04:54:00 +00:00
Tatuya JINMEI 神明達哉
ff2c81060f added pre-initialization check on cachedb->node_lock_count. 2008-10-27 22:43:34 +00:00
Mark Andrews
86ee7433b3 2475. [bug] LRU cache cleanup under overmem condition could purge
particular entries more aggresively. [RT #17628]
2008-10-27 03:52:43 +00:00
Mark Andrews
4ac81dfb30 silence compiler warning. [RT #18766] 2008-10-24 00:11:17 +00:00
Automatic Updater
6e2871232f update copyright notice 2008-09-24 03:16:58 +00:00
Mark Andrews
6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Tatuya JINMEI 神明達哉
52d5489b95 2415. [bug] 'rndc dumpdb' could trigger various assertion failures
in rbtdb.c. [RT #18455]
2008-08-13 02:28:45 +00:00
Tatuya JINMEI 神明達哉
99a87dacc3 cleanup (removed meaningless condition) [RT #18144] 2008-06-04 01:11:05 +00:00
Tatuya JINMEI 神明達哉
5c024f7877 cleanups for LRU-caching code [RT #18018] 2008-05-01 18:23:07 +00:00
Evan Hunt
2284b84d74 Make "rrset-order fixed" a compile-time option. settable by
"./configure --enable-fixed-rrset". Disabled by default. [rt17977]
2008-04-23 21:32:57 +00:00
Mark Andrews
537266cadc comment out '#define inline' 2008-04-09 04:31:11 +00:00
Mark Andrews
8907d8fa04 2355. [func] Extend the number statistics counters available.
[RT #17590]
2008-04-03 05:55:52 +00:00
Mark Andrews
d904beeb3b 2354. [bug] Failed to initialise sone rdatasetheader_t elements.
[RT #17927]
2008-04-03 04:00:38 +00:00
Mark Andrews
3f42cf2f3e 2349. [func] Provide incremental re-signing support for secure
dynamic zones. [RT #1091]

back out incorrect branch rt1091 and apply correct branch rt1091a.
2008-04-02 02:37:42 +00:00
Automatic Updater
e672951ed2 update copyright notice 2008-04-01 23:47:10 +00:00
Mark Andrews
a76b380643 2349. [func] Provide incremental re-signing support for secure
dynamic zones. [RT #1091]
2008-04-01 01:37:25 +00:00
Automatic Updater
8b90c4fdad update copyright notice 2008-02-01 23:46:58 +00:00
Mark Andrews
9dcc44d7b3 2327. [bug] It was possible to dereference a NULL in rbtdb.c.
Implement deadnode processing in zones as we do for
                        caches. [RT #17312]
2008-02-01 04:31:04 +00:00
Automatic Updater
da1e0ac742 update copyright notice 2008-01-31 23:47:06 +00:00
Mark Andrews
5badfc7e00 2326. [bug] It was possible to trigger a INSIST in the acache
processing.
2008-01-31 05:28:46 +00:00
Mark Andrews
d7e8610d31 2270. [bug] dns_db_closeversion() version->writer could be reset
before it is tested. [RT #17290]
2007-12-02 20:27:35 +00:00
Michael Graff
b239c8294a commit lruttl to the mainline. A tag was set called skan_lruttl-mainline-base, and I will tag this as skan_lruttl-mainline-merge after this commit 2007-10-19 17:15:53 +00:00
Mark Andrews
6133734cec 2200. [bug] The search for cached NSEC records was stopping to
early leading to excessive DLV queries. [RT #16930]
2007-06-19 06:19:29 +00:00
Automatic Updater
ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews
65085946d4 2162. [func] Allow "rrset-order fixed" to be disabled at compile
time. [RT #16665]
: ----------------------------------------------------------------------
2007-03-14 05:57:10 +00:00
Mark Andrews
62ea33ba1a 2159. [bug] Array bounds overrun in acache processing. [RT #16710] 2007-03-12 03:37:21 +00:00
Mark Andrews
a56f5ada43 2157. [func] dns_db_transfernode() created. [RT #16685]
2156.   [bug]           Fix node reference leaks in lookup.c:lookup_find(),
                        resolver.c:validated() and resolver.c:cache_name().
                        Fix a memory leak in rbtdb.c:free_noqname().
                        Make lookup.c:lookup_find() robust against
                        event leaks. [RT #16685]
2007-03-06 00:38:58 +00:00
Automatic Updater
77ab862dca update copyright notice 2007-02-26 23:46:54 +00:00
Mark Andrews
9dabd0455c 2150. [bug] 'rrset-order cyclic' uniformly distribute the
starting point for the first response for a given
                        RRset. [RT #16655]
2007-02-26 23:15:17 +00:00